Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Artbees Subscribe
Filtered by product Jupiter X Core
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-1656 1 Artbees 2 Jupiter X Core, Jupiterx 2022-06-17 5.5 MEDIUM 5.4 MEDIUM
Vulnerable versions of the JupiterX Theme (<=2.0.6) allow any logged-in user, including subscriber-level users, to access any of the functions registered in lib/api/api/ajax.php, which also grant access to the jupiterx_api_ajax_ actions registered by the JupiterX Core Plugin (<=2.0.6). This includes the ability to deactivate arbitrary plugins as well as update the theme’s API key.